Surprise! Singapore Backtracks On Privacy Pledge And Opens Contact Tracing Data To Police

from the making-contact dept

Singapore has a relatively long history when it comes to using modern technology to create a surveillance state within its borders. The monitoring of use of the internet and other digital services goes way back to 2002, sold to the citizenry as both an anti-terrorism bulwark and a tool to keep hate-speech at bay. Of course, though the populace as a whole seemed to take to the government's use of surveillance for a variety of reasons, Singapore also has a history of clamping down on any speech it simply doesn't like.

At present, of course, surveillance of populations has increased worldwide, though in the form of contact tracing to combat the COVID-19 pandemic. All sorts of technology and tools have been rolled out to accomplish effective contract tracing, with unfortunately far less emphasis put on securing the data of participants. It should go without saying that if contact tracing is going to be effective, it needs to be widely trusted and adopted. Any breaks in the links of the contact chain render it worthless. Which is probably why Singapore had assured its citizenry, when rolling out its plan for contact tracing using the TraceTogether app, that any data collected from it would be secured and used only for tracing purposes.

In its efforts to ease privacy concerns, the Singapore government had stressed repeatedly that COVID-19 data would "never be accessed unless the user tests positive" for the virus and was contacted by the contact tracing team. Personal data such as unique identification number and mobile number also would be substituted by a random permanent ID and stored on a secured server.

Minister-in-Charge of the Smart Nation Initiative and Minister for Foreign Affairs, Vivian Balakrishnan, also had insisted the TraceTogether token was not a tracking device since it did not contain a GPS chip and could not connect to the internet. He further noted that all TraceTogether data would be encrypted and stored for up to 25 days, after which it would be automatically deleted, adding that the information would be uploaded to the Health Ministry only when an individual tested positive for COVID-19 and this could be carried out only by physically handing over the wearable device to the ministry, Balakrishnan said.

The promises went on, including assurances that a very small number of contact tracers would have access to the data. This, again, was done specifically to increase the adoption in use of the app in order to get the pandemic in Singapore under control. The interests of public health ruled supreme, said the government.

Those interests lasted mere months, however, now that the Singapore government has announced that law enforcement would get access to the data for any number of reasons, including for use in open investigations.

However, the Singapore government now has confirmed local law enforcement will be able to access the data for criminal investigations. Under the Criminal Procedure Code, the Singapore Police Force can obtain any data and this includes TraceTogether data, according to Minister of State for Home Affairs, Desmond Tan. He was responding to a question posed during parliament Monday on whether the TraceTogether data would be used for criminal probes and the safeguards governing the use of such data.

He noted that "authorised police officers" may invoke the Criminal Procedure Code to access TraceTogether data for such purposes as well as for criminal investigation, but this data would, otherwise, be used only for contact tracing and to combat the spread of COVID-19.

It's hard to imagine any such assurances finding much purchase given the one-eighty the government already performed on its previous promises. Privacy advocates are crying foul, with ProPrivacy's Ray Walsh noting that the Singapore government appears poised to mandate the use of TraceTogether while also opening that data up to law enforcement, a scenario sure to breed distrust of the app during a global pandemic.

"This is extremely concerning considering that the government is planning to make the use of the TraceTogether app mandatory for all citizens," he said. "Test and trace systems forced on the general public for the purposes of preventing the spread of the pandemic have no right being used to create an extensive surveillance network, and it is extremely unnerving to see a soon-to-be mandatory app being exploited in this way."

As Churchill said, "Never let a good crisis go to waste." One hopes that, when he said it, Churchill didn't have the creation of a mass surveillance tool excused by a pandemic in mind.

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: contact tracing, covid, law enforcement, privacy, singapore, surveillance